Skip to main content

EvalGate HTTP Tool API

An authenticated, read-only-by-default API for agent inspection. This endpoint is not an MCP server and cannot be used as an MCP client transport.

GET /api/mcp/tools

Returns the read-only tools available to the authenticated organization. A bearer token with eval:read is required; tool discovery is not public.
By default only eval.quality.latest, eval.get, and eval.list are returned. The response is tenant-bound and private. Operators may set EVALGATE_TOOL_API_WRITES=true to advertise mutation tools, which still require their authenticated write scopes. Keep the flag disabled for read-only access.

POST /api/mcp/call

Executes one of the discovered tools. A write-capable tool returns 403 Forbidden unless EVALGATE_TOOL_API_WRITES=true and the authenticated caller has its Required write scope.

MCP compatibility

EvalGate does not currently expose a standards-conformant Model Context Protocol server. Do not point Cursor, Claude Desktop, or another MCP client at these endpoints. Use the documented HTTP API directly until an MCP transport and compatibility matrix are released.